$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/203ae26f-5300-4c36-a7b7-bf8a731d077f.roa File: 203ae26f-5300-4c36-a7b7-bf8a731d077f.roa (raw, json) Hash identifier: 3AcPwQGqa0U9qVWuG1TMfiH76v14x8QU0OYGJ/3Gfvk= Subject key identifier: C8:F6:D0:4D:50:09:D2:79:D6:4D:F0:EA:F5:AC:F5:47:15:26:13:52 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 320BA57E50527142DF9C9B3842C0AC226970E694 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/203ae26f-5300-4c36-a7b7-bf8a731d077f.roa Signing time: Mon 20 Oct 2025 12:22:51 +0000 ROA not before: Mon 20 Oct 2025 12:22:51 +0000 ROA not after: Mon 24 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.170.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:0b:a5:7e:50:52:71:42:df:9c:9b:38:42:c0:ac:22:69:70:e6:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 20 12:22:51 2025 GMT Not After : Nov 24 23:59:59 2025 GMT Subject: serialNumber=627ccb782086a898c28a7dd35332899ca672a1086dc081b4fb2144da975b234a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:78:85:c2:3d:bc:f8:13:85:f9:c7:73:93:0b: bf:fb:a0:59:24:a0:28:1d:50:f6:56:cc:d3:47:ba: 5d:05:89:f1:65:97:d3:9e:89:fc:15:27:2a:db:84: 72:b7:29:cc:6b:33:91:16:8d:57:c2:57:34:2c:9c: 89:af:dd:fb:3d:62:36:2f:5e:b8:a4:63:48:48:60: 8f:3a:ef:c5:28:ce:d5:91:c7:40:f0:aa:df:2e:53: 60:0a:0d:d2:46:0d:ad:25:a9:80:84:8f:83:8e:fe: a0:11:14:29:ea:fc:94:8e:11:af:8a:e8:f6:4c:8f: c9:88:b2:bb:7c:a2:2c:73:a6:6d:03:78:29:ab:af: 36:bc:df:65:b4:45:ab:52:f9:36:aa:45:57:89:b2: 2e:30:20:03:58:43:93:f8:b3:6a:bf:1a:47:12:88: 05:0e:d4:05:d2:5c:e5:02:35:e6:b4:f6:d4:82:e1: 4d:43:cc:4f:26:bf:9f:88:ec:08:a1:3d:b0:ea:2a: 3b:d2:3b:c2:95:08:76:77:e0:3c:92:0d:25:d1:9e: c9:45:fb:ea:2c:4c:f2:25:19:7e:f4:d8:b9:a0:86: 6e:9f:2c:49:20:10:e0:d0:18:82:a6:ad:bc:01:9a: 55:8b:87:97:80:0c:0e:47:32:3b:63:89:05:96:9e: 94:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F6:D0:4D:50:09:D2:79:D6:4D:F0:EA:F5:AC:F5:47:15:26:13:52 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/203ae26f-5300-4c36-a7b7-bf8a731d077f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.170.28.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:19:d5:3d:7a:27:0d:1b:a4:9e:e7:dd:f3:6c:83:2c:da:29: 9d:a4:31:00:79:07:5e:20:5d:1e:27:b5:67:75:97:39:70:5e: e0:0b:26:63:85:fb:1a:da:56:a0:8c:d6:db:e6:10:05:17:c9: 04:56:01:ac:28:2b:19:c0:3f:3a:22:d8:6a:f1:dc:7b:a8:f3: 7c:59:9a:db:bf:9c:37:2d:62:47:66:20:74:46:a8:12:16:bf: bd:92:a7:10:24:da:15:42:47:17:ef:43:0a:36:c3:2d:0f:c2: f8:ee:e5:99:b4:b8:c2:65:c7:50:a3:15:8c:ed:af:ab:85:d8: e9:12:ca:80:36:9e:1f:f5:6c:aa:79:11:b1:b8:a2:b9:54:92: 0e:ba:8a:8c:78:a0:1f:26:96:3f:18:48:7a:bb:5d:c9:d0:e0: 30:f4:d9:d6:54:af:1e:18:be:c3:5a:8f:86:05:5b:16:89:e6: 6a:aa:47:06:27:65:fd:b2:8b:94:5b:79:23:ad:ba:02:fd:00: 14:10:1b:57:7f:29:f0:87:a6:a5:84:18:7a:7f:47:6f:e2:45: 84:bb:51:64:80:f9:86:f3:78:b7:12:2e:5a:dc:b9:2f:31:95: 70:1f:e6:a8:a2:2a:9f:8b:c6:1f:f7:d1:bc:40:7a:18:c9:8b: 36:d3:74:66 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMgulflBScULfnJs4QsCsImlw5pQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIwMTIyMjUxWhcNMjUxMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MjdjY2I3ODIwODZhODk4YzI4YTdkZDM1MzMyODk5Y2E2 NzJhMTA4NmRjMDgxYjRmYjIxNDRkYTk3NWIyMzRhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoeIXCPbz4E4X5x3OTC7/7oFkkoCgdUPZWzNNHul0FifFl l9OeifwVJyrbhHK3KcxrM5EWjVfCVzQsnImv3fs9YjYvXrikY0hIYI8678UoztWR x0Dwqt8uU2AKDdJGDa0lqYCEj4OO/qARFCnq/JSOEa+K6PZMj8mIsrt8oixzpm0D eCmrrza832W0RatS+TaqRVeJsi4wIANYQ5P4s2q/GkcSiAUO1AXSXOUCNea09tSC 4U1DzE8mv5+I7AihPbDqKjvSO8KVCHZ34DySDSXRnslF++osTPIlGX702Lmghm6f LEkgEODQGIKmrbwBmlWLh5eADA5HMjtjiQWWnpQ1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyPbQTVAJ0nnWTfDq9az1RxUmE1IwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIwM2FlMjZmLTUzMDAtNGMzNi1hN2I3LWJmOGE3MzFkMDc3Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDqhwwDQYJKoZIhvcNAQELBQADggEBABwZ1T16Jw0bpJ7n3fNsgyzaKZ2k MQB5B14gXR4ntWd1lzlwXuALJmOF+xraVqCM1tvmEAUXyQRWAawoKxnAPzoi2Grx 3Huo83xZmtu/nDctYkdmIHRGqBIWv72SpxAk2hVCRxfvQwo2wy0Pwvju5Zm0uMJl x1CjFYztr6uF2OkSyoA2nh/1bKp5EbG4orlUkg66iox4oB8mlj8YSHq7XcnQ4DD0 2dZUrx4YvsNaj4YFWxaJ5mqqRwYnZf2yi5RbeSOtugL9ABQQG1d/KfCHpqWEGHp/ R2/iRYS7UWSA+YbzeLcSLlrcuS8xlXAf5qiiKp+Lxh/30bxAehjJizbTdGY= -----END CERTIFICATE-----Generated at Mon Oct 20 15:48:39 2025 by rpki-client